Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Trying to access a particular drive causes explorer to crash

explorer crash device not available errors

  • Please log in to reply

#1
gareth219

gareth219

    New Member

  • Member
  • Pip
  • 1 posts

Greetings gentlemen,

 

I have a programme that won't install saying IO,IO etc 'device not available'. Also windows explorer crashes when I try to access my F: drive

I'm at my wits endv with this, could it be a walware issue? I use ESET NOD 32 and occasionally Spybot.

 

Any help you can offer will ber grrrreatly appreciated.

 

Regards

Gareth

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by Gareth (administrator) on GARETH-PC (28-03-2016 22:18:42)
Running from C:\Users\Gareth\Downloads\Programs
Loaded Profiles: Gareth (Available Profiles: Gareth)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Schneider Electric) C:\Program Files (x86)\APC\PowerChute Personal Edition\mainserv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
() C:\Program Files (x86)\Allway Sync\Bin\SyncService.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Program Files (x86)\OpenVPN Technologies\PrivateTunnel\ovpnagent.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Schneider Electric) C:\Program Files (x86)\APC\PowerChute Personal Edition\dataserv.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Ashampoo Development GmbH & Co. KG) C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 12\LiveTuner2.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
() C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(Corsair Components  Inc) C:\Program Files (x86)\Corsair\K50 Keyboard\K50Hid.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\USB Sound Blaster HD\Volume Panel\VolPanlu.exe
(Corsair Components  Inc) C:\Program Files (x86)\Corsair\K50 Keyboard\CorsTra.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(Schneider Electric) C:\Program Files (x86)\APC\PowerChute Personal Edition\apcsystray.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
() C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 12\LiveTunerService.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
 
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [617120 2011-03-13] (Atheros Commnucations)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11613288 2010-11-19] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [518424 2013-07-18] (Acronis)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3113592 2015-08-26] (Logitech, Inc.)
HKLM\...\Run: [Ashampoo WinOptimizer Live-Tuner2] => C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 12\LiveTuner2.exe [3822416 2016-01-20] (Ashampoo Development GmbH & Co. KG)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe
HKLM-x32\...\Run: [OpwareSE4] => C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [EaseUS TB Tray Agent] => C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe [253992 2015-12-10] ()
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1298456 2015-04-20] (CANON INC.)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [7805936 2014-02-04] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1102192 2013-10-10] (Acronis International GmbH)
HKLM-x32\...\Run: [Corsair K50] => C:\Program Files (x86)\Corsair\K50 Keyboard\K50Hid.exe [1787904 2013-08-06] (Corsair Components  Inc)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Display] => C:\Program Files (x86)\APC\PowerChute Personal Edition\DataCollectionLauncher.exe [284024 2012-01-24] (Schneider Electric)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [23248464 2016-03-23] (Dropbox, Inc.)
HKLM-x32\...\Run: [VolPanel] => C:\Program Files (x86)\Creative\USB Sound Blaster HD\Volume Panel\VolPanlu.exe [241757 2010-12-08] (Creative Technology Ltd)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-778663071-3000615460-497893972-1000\...\Run: [TIDAL] => [X]
HKU\S-1-5-21-778663071-3000615460-497893972-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [60688 2015-11-30] (Apple Inc.)
HKU\S-1-5-21-778663071-3000615460-497893972-1000\...\Run: [iCloudPhotos] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [349968 2015-11-30] (Apple Inc.)
ShellIconOverlayIdentifiers: [   IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-03-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-03-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-03-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-03-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-03-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-03-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-03-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-03-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-10-01] ()
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-10-01] ()
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-10-01] ()
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-03-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-03-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-03-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-03-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-03-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-03-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-03-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-03-23] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\APC UPS Status.lnk [2016-03-15]
ShortcutTarget: APC UPS Status.lnk -> C:\Program Files (x86)\APC\PowerChute Personal Edition\Display.exe (Schneider Electric)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{3C3627DB-44A5-4CEF-BCF9-60B36EF6E8BA}: [DhcpNameServer] 192.168.0.1
 
Internet Explorer:
==================
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-13] (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} 
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} 
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab
 
FireFox:
========
FF ProfilePath: C:\Users\Gareth\AppData\Roaming\Mozilla\Firefox\Profiles\weu19b0a.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_197.dll [2016-03-24] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_197.dll [2016-03-24] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2014-07-28] (CANON INC.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-02-09] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-02-09] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN)
FF Extension: IDM integration - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2016-03-10]
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-20] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2016-03-03] [not signed]
FF HKU\S-1-5-21-778663071-3000615460-497893972-1000\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-778663071-3000615460-497893972-1000\...\SeaMonkey\Extensions: [[email protected]] - C:\Users\Gareth\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Gareth\AppData\Roaming\IDM\idmmzcc5 [2016-03-28] [not signed]
FF HKU\S-1-5-21-778663071-3000615460-497893972-1000\...\SeaMonkey\Extensions: [[email protected]] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
 
Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/ig#m_1
CHR StartupUrls: Default -> "hxxp://www.bbc.com/news/uk"
CHR Profile: C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Translate) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2016-02-18]
CHR Extension: (Google Slides) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-18]
CHR Extension: (Duolingo on the Web) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiahmijlpehemcpleichkcokhegllfjl [2016-02-18]
CHR Extension: (PasswordBox - Log in with 1-Click) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajgnnllmjadopdlmpplonojbfogkjlcl [2016-02-18]
CHR Extension: (Google Translate Pad) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajgpafgiahigeanbnnmdbnkdkllhjndl [2016-02-18]
CHR Extension: (Gold Price Charts, Silver Price Charts & News) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\animfandjbomecobenkahkholebdiihi [2016-02-18]
CHR Extension: (Google Drive) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-18]
CHR Extension: (Keeper® Password Manager) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfogiafebfohielmmehodmfbbebbbpei [2016-02-24]
CHR Extension: (YouTube) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-18]
CHR Extension: (Adblock Plus) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-09]
CHR Extension: (Google Search) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-18]
CHR Extension: (WGT Golf Challenge) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcilimldmomiaihcfkmaldanopfejefg [2016-02-18]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2016-02-18]
CHR Extension: (Google Sheets) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-18]
CHR Extension: (iCloud Bookmarks) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2016-02-18]
CHR Extension: (Musixmatch Lyrics for YouTube) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfenjblodoldnbiddmggcbkcapiolbig [2016-02-18]
CHR Extension: (Google Docs Offline) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Dictionary by Dictionary.com) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\gikhgcaliglmioibbockkmjknfnepbdh [2016-02-18]
CHR Extension: (Open PayPal) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\glghgmejmmepalcnengjekjfmfbailbl [2016-02-18]
CHR Extension: (World Time Buddy) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\jdhpjomiingppeefgnohkiapmnaeakoj [2016-02-18]
CHR Extension: (Zoho Writer) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgaeidloagadfcohacebhbkkapgpiddj [2016-02-18]
CHR Extension: (Bubble Translate) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhlebbhengjlhmcjebbkambaekglhkf [2016-02-18]
CHR Extension: (Autodesk Homestyler) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2016-02-18]
CHR Extension: (SparkChess 8) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\khgabmflimjjbclkmljlpmgaleanedem [2016-02-18]
CHR Extension: (Google Docs Viewer (by Google)) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkjmcfdcdbbkdacicmpokoddagejpknh [2016-02-18]
CHR Extension: (Currency Converter) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbhghjdcfghfhlogkgdklfgmpodeglno [2016-02-18]
CHR Extension: (Google Maps) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2016-02-18]
CHR Extension: (Google Dictionary (by Google)) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja [2016-02-24]
CHR Extension: (IDM Integration Module) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2016-03-17]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-02-18]
CHR Extension: (Evernote Web Clipper) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2016-03-02]
CHR Extension: (Gmail) - C:\Users\Gareth\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-18]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2016-03-11]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2016-03-11]
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 APC Data Service; C:\Program Files (x86)\APC\PowerChute Personal Edition\dataserv.exe [21880 2012-01-24] (Schneider Electric)
R2 APC UPS Service; C:\Program Files (x86)\APC\PowerChute Personal Edition\mainserv.exe [705912 2012-01-24] (Schneider Electric)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [74912 2011-03-13] (Atheros Commnucations) [File not signed]
R2 BotkindSyncService; C:\Program Files (x86)\Allway Sync\Bin\SyncService.exe [182784 2015-10-29] () [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [286720 2010-02-12] (Creative Technology Ltd) [File not signed]
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-22] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-22] (Dropbox, Inc.)
R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [36904 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2519904 2016-03-19] (ESET)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation)
R2 ovpnagent; C:\Program Files (x86)\OpenVPN Technologies\PrivateTunnel\ovpnagent.exe [1491320 2016-01-23] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6942480 2016-03-02] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WO_LiveService2; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 12\LiveTunerService.exe [231248 2016-01-20] ()
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 CORK50; C:\Windows\System32\drivers\CORK50.sys [25600 2012-08-10] ( )
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264552 2016-03-19] (ESET)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [186784 2015-11-16] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [170792 2016-03-19] (ESET)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [18528 2014-11-18] ()
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14944 2014-11-18] ()
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48168 2015-12-10] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2014-11-18] ()
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2014-11-18] ()
R2 LiveTuner2PM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 12\LiveTuner64.sys [14320 2014-03-20] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
R3 ptun0901; C:\Windows\System32\DRIVERS\ptun0901.sys [27136 2015-11-10] (The OpenVPN Project)
R3 SaiK075C; C:\Windows\System32\DRIVERS\SaiK075C.sys [181920 2016-02-02] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [23968 2016-02-02] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [51616 2016-02-02] (Saitek)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2016-02-17] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [198432 2016-02-17] (Acronis International GmbH)
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [117024 2016-02-17] (Acronis International GmbH)
S3 ALSysIO; \??\C:\Users\Gareth\AppData\Local\Temp\ALSysIO64.sys [X]
U3 DfSdkS; no ImagePath
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-03-28 22:18 - 2016-03-28 22:18 - 00000000 ____D C:\FRST
2016-03-28 22:10 - 2016-03-28 22:10 - 00000000 ___RD C:\Users\Gareth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2016-03-28 17:03 - 2016-03-28 17:03 - 00415272 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-28 16:23 - 2016-03-28 16:23 - 00109296 _____ C:\Users\Gareth\AppData\Local\GDIPFONTCACHEV1.DAT
2016-03-28 16:17 - 2016-03-28 16:17 - 00000082 _____ C:\Users\Gareth\Documents\cc_20160328_161745.reg
2016-03-28 16:12 - 2013-01-25 11:08 - 00089600 _____ C:\Windows\SysWOW64\CmdRtr64.DLL
2016-03-28 16:12 - 2013-01-25 11:06 - 00328704 _____ C:\Windows\SysWOW64\APOMgr64.DLL
2016-03-28 16:11 - 2016-03-28 16:11 - 00003010 _____ C:\Windows\System32\Tasks\{D36577A2-C398-493F-84BA-6B617ECC74E5}
2016-03-28 16:11 - 2016-03-28 16:11 - 00003010 _____ C:\Windows\System32\Tasks\{79E23259-D4C8-4C6D-BC43-BD0C5076F08D}
2016-03-28 16:09 - 2016-03-28 16:09 - 00003014 _____ C:\Windows\System32\Tasks\{54D63A48-ECE3-4048-B964-3549F26127DA}
2016-03-28 16:01 - 2014-04-17 11:06 - 00175104 ____N (Creative Technology Ltd) C:\Windows\system32\CtUsAs64.DLL
2016-03-28 15:58 - 2016-03-28 15:58 - 00006962 _____ C:\Users\Gareth\Documents\cc_20160328_155810.reg
2016-03-28 15:56 - 2016-03-28 15:56 - 00096358 _____ C:\Users\Gareth\Documents\cc_20160328_155613.reg
2016-03-28 14:24 - 2016-03-28 14:24 - 00002794 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-03-28 14:24 - 2016-03-28 14:24 - 00000830 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-03-28 14:24 - 2016-03-28 14:24 - 00000830 _____ C:\ProgramData\Desktop\CCleaner.lnk
2016-03-28 14:24 - 2016-03-28 14:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-03-28 14:24 - 2016-03-28 14:24 - 00000000 ____D C:\Program Files\CCleaner
2016-03-27 23:04 - 2016-03-28 19:20 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-03-27 23:04 - 2016-03-28 15:33 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\TeamViewer
2016-03-27 23:04 - 2016-03-27 23:04 - 00001053 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2016-03-27 23:04 - 2016-03-27 23:04 - 00001041 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2016-03-27 23:04 - 2016-03-27 23:04 - 00001041 _____ C:\ProgramData\Desktop\TeamViewer 11.lnk
2016-03-25 17:55 - 2016-03-25 17:55 - 00000226 _____ C:\Users\Gareth\Desktop\Asus P8Z68 DELUXE Performance Results - UserBenchmark.URL
2016-03-25 11:57 - 2016-03-25 11:57 - 00001148 _____ C:\Users\Public\Desktop\Duplicate Cleaner.lnk
2016-03-25 11:57 - 2016-03-25 11:57 - 00001148 _____ C:\ProgramData\Desktop\Duplicate Cleaner.lnk
2016-03-25 11:57 - 2016-03-25 11:57 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\DigitalVolcano
2016-03-25 11:57 - 2016-03-25 11:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duplicate Cleaner Free
2016-03-25 11:57 - 2016-03-25 11:57 - 00000000 ____D C:\Program Files (x86)\Duplicate Cleaner
2016-03-25 11:53 - 2016-03-25 11:53 - 00000206 _____ C:\Users\Gareth\Desktop\NirSoft - freeware utilities password recovery, system utilities, desktop utilities.URL
2016-03-24 22:05 - 2016-03-24 22:07 - 00000000 ____D C:\3fcd56bc6987896e14736b5f90d9e017
2016-03-24 15:38 - 2016-03-24 15:38 - 00003236 _____ C:\Windows\System32\Tasks\{8AA51621-886D-4A65-85C1-B223581941C0}
2016-03-24 15:25 - 2016-03-24 15:38 - 00001277 _____ C:\Users\Gareth\Desktop\VFXCentral.lnk
2016-03-24 15:25 - 2016-03-24 15:25 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OldProp Solutions Inc
2016-03-24 15:25 - 2016-03-24 15:25 - 00000000 ____D C:\Program Files (x86)\OldProp Solutions Inc
2016-03-23 09:23 - 2016-03-23 09:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-03-22 22:06 - 2016-03-22 22:06 - 00000000 ____D C:\Users\Gareth\Desktop\AI Traffic Manager
2016-03-22 22:06 - 2016-03-22 22:06 - 00000000 ____D C:\Users\Gareth\AppData\Local\AirTrafficManager
2016-03-22 17:13 - 2016-03-22 17:13 - 00000000 ____D C:\ProgramData\Creative Labs
2016-03-22 16:56 - 2016-03-28 14:40 - 00000000 ____D C:\ProgramData\Creative
2016-03-22 16:55 - 2016-03-28 16:01 - 00000000 ___HD C:\Program Files (x86)\Creative Installation Information
2016-03-22 16:54 - 2016-03-28 16:21 - 00000000 ____D C:\Program Files (x86)\Creative
2016-03-22 16:54 - 2016-03-28 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2016-03-22 16:54 - 2016-03-28 16:01 - 00000000 ____D C:\Program Files\Creative
2016-03-22 16:54 - 2016-03-28 16:00 - 00002339 _____ C:\Users\Public\Desktop\Creative Product Registration.lnk
2016-03-22 16:54 - 2016-03-28 16:00 - 00002339 _____ C:\ProgramData\Desktop\Creative Product Registration.lnk
2016-03-22 16:54 - 2014-04-17 11:06 - 00163840 ____N (Creative Technology Ltd) C:\Windows\SysWOW64\CtUsAsio.DLL
2016-03-22 16:16 - 2016-03-22 16:16 - 00003014 _____ C:\Windows\System32\Tasks\{91FD1F86-90F5-4C9A-BB89-90258E2D367D}
2016-03-22 16:15 - 2016-03-22 16:15 - 00003274 _____ C:\Windows\System32\Tasks\{3C53C8FF-E516-4D98-864D-A4E6C73C88E7}
2016-03-22 16:14 - 2016-03-22 16:14 - 00003074 _____ C:\Windows\System32\Tasks\{DDAD9C5B-590A-4CCA-BC13-172752FA2236}
2016-03-22 15:29 - 2016-03-28 14:14 - 00001325 _____ C:\Users\Gareth\Desktop\FTX Central 2  (P3DV3 - Oceania).lnk
2016-03-22 15:21 - 2016-03-22 15:21 - 00003040 _____ C:\Users\Gareth\Desktop\Support.txt
2016-03-22 15:21 - 2016-03-22 15:20 - 00031931 _____ C:\Users\Gareth\Desktop\CTSi.cab
2016-03-22 15:21 - 2016-03-22 15:15 - 00726532 _____ C:\Users\Gareth\Desktop\CTSi.txt
2016-03-22 15:21 - 2016-03-22 15:15 - 00726532 _____ C:\Users\Gareth\CTSi.txt
2016-03-22 00:33 - 2016-03-28 22:10 - 00000000 ___RD C:\Users\Gareth\Dropbox
2016-03-22 00:33 - 2016-03-22 00:33 - 00001232 _____ C:\Users\Gareth\Desktop\Dropbox.lnk
2016-03-22 00:30 - 2016-03-22 00:30 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Dropbox
2016-03-22 00:28 - 2016-03-28 22:10 - 00000904 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2016-03-22 00:28 - 2016-03-28 22:01 - 00000908 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2016-03-22 00:28 - 2016-03-23 09:23 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-03-22 00:28 - 2016-03-23 09:21 - 00000000 ____D C:\Users\Gareth\AppData\Local\Dropbox
2016-03-22 00:28 - 2016-03-22 00:28 - 00003904 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA
2016-03-22 00:28 - 2016-03-22 00:28 - 00003652 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore
2016-03-22 00:28 - 2016-03-22 00:28 - 00000000 ____D C:\ProgramData\Dropbox
2016-03-22 00:12 - 2016-03-09 00:37 - 33225861 _____ C:\Users\Gareth\Desktop\Cessna Citation Mustang for P3D Pilot's Guide.pdf
2016-03-21 17:32 - 2016-03-21 17:32 - 00000312 _____ C:\Users\Gareth\Desktop\IPHONE 5C 16GB Negro class A - CON 12 meses de GARANTÍA eBay.URL
2016-03-20 22:43 - 2016-03-20 22:43 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Flight One Software
2016-03-20 22:42 - 2016-03-20 22:42 - 00001479 _____ C:\Users\Gareth\Desktop\revision_history.lnk
2016-03-20 22:42 - 2016-03-20 22:42 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flight One Software
2016-03-20 22:35 - 2016-03-21 10:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-03-20 22:04 - 2016-03-20 22:04 - 33256339 _____ C:\Users\Gareth\Desktop\Mustang  Guide.pdf
2016-03-20 20:50 - 2016-03-20 22:39 - 00000000 ____D C:\Windows\Flight1 Citation Mustang P3D
2016-03-20 20:49 - 2016-03-20 20:49 - 00002048 _____ C:\Windows\mstgp3d.lic
2016-03-20 09:08 - 2016-03-20 09:08 - 00000341 _____ C:\Users\Gareth\Desktop\Hotel Ilunion Alcalá Norte, Madrid, Spain - Booking.com.url
2016-03-18 09:43 - 2016-03-18 09:43 - 00000226 _____ C:\Users\Gareth\Desktop\Blurries - The Prepar3d Process Lassoo.URL
2016-03-17 15:13 - 2016-03-17 15:13 - 00000065 _____ C:\Windows\sbwin.ini
2016-03-17 14:39 - 2013-03-26 13:19 - 00040160 _____ C:\Windows\system32\kschimp.ini
2016-03-17 14:38 - 2016-03-28 16:12 - 00000245 ___RH C:\Windows\ctfile.rfc
2016-03-17 14:38 - 2016-03-28 16:00 - 00466520 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2016-03-17 14:38 - 2016-03-28 16:00 - 00445016 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2016-03-17 14:38 - 2016-03-28 16:00 - 00123480 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2016-03-17 14:38 - 2016-03-28 16:00 - 00109144 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2016-03-17 14:38 - 2014-04-25 17:29 - 01609728 _____ (Creative) C:\Windows\SysWOW64\Sens_oal.dll
2016-03-17 14:38 - 2014-04-25 16:33 - 01898496 ____N (Creative) C:\Windows\system32\Sens_oal.dll
2016-03-17 14:38 - 2013-03-26 18:04 - 01086464 _____ (Creative Technology Ltd.) C:\Windows\system32\KSAPO64.dll
2016-03-17 14:38 - 2013-03-26 18:03 - 00904192 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\KSAPO32.dll
2016-03-17 14:38 - 2013-03-26 17:31 - 01558528 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\ksaud.sys
2016-03-17 14:38 - 2013-03-26 13:33 - 00011678 _____ C:\Windows\system32\MixerDefault.reg
2016-03-17 14:38 - 2013-03-26 13:33 - 00001975 _____ C:\Windows\system32\DeviceDefaultVista.reg
2016-03-17 14:38 - 2013-03-26 13:19 - 00032535 _____ C:\Windows\system32\ksaud.ini
2016-03-17 14:38 - 2010-07-14 15:12 - 00057856 _____ (Creative Technology Ltd.) C:\Windows\system32\KSPPLD64.dll
2016-03-17 14:38 - 2010-04-06 15:20 - 00239104 _____ (Creative Technology Ltd.) C:\Windows\system32\KSVSPI64.dll
2016-03-17 14:38 - 2010-04-06 15:19 - 00177152 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\KSVSPI32.dll
2016-03-17 14:38 - 2010-01-12 15:05 - 00109056 _____ (Creative Technology Ltd.) C:\Windows\system32\SBAVMon.dll
2016-03-17 14:38 - 2009-05-26 16:59 - 00026768 _____ C:\Windows\ksaudENG.reg
2016-03-17 14:38 - 2007-07-05 11:27 - 00002630 _____ C:\Windows\MixerName.reg
2016-03-17 14:38 - 2006-10-06 15:17 - 00053248 ____N (Creative Technology Ltd ) C:\Windows\Ctregrun.exe
2016-03-17 14:38 - 2003-06-13 00:25 - 00007062 _____ C:\Windows\SysWOW64\audiopid.vxd
2016-03-17 14:38 - 2000-05-22 17:58 - 00647872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscomct2.ocx
2016-03-17 14:35 - 2016-03-17 14:37 - 159481824 _____ (Creative Technology Ltd) C:\Users\Gareth\Desktop\XUHD_PCDRV_L11_1_02_0021a.exe
2016-03-17 09:15 - 2016-03-17 09:15 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Inputwish
2016-03-17 09:15 - 2016-03-17 09:15 - 00000000 ____D C:\Users\Gareth\AppData\Local\Deployment
2016-03-17 09:15 - 2016-03-17 09:15 - 00000000 ____D C:\Users\Gareth\AppData\Local\Apps\2.0
2016-03-17 09:00 - 2016-03-17 09:00 - 00000000 ____D C:\Users\Gareth\AppData\Local\Inputwish
2016-03-16 18:25 - 2016-03-16 18:26 - 00000000 ____D C:\Program Files (x86)\FSWidgets Network Pack
2016-03-16 18:25 - 2016-03-16 18:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FSWidgets - Network Pack
2016-03-16 17:35 - 2016-03-16 17:35 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2016-03-16 17:35 - 2016-03-16 17:35 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2016-03-16 09:11 - 2016-03-16 09:11 - 00001682 _____ C:\Users\Public\Desktop\REX 4 - Texture Direct .lnk
2016-03-16 09:11 - 2016-03-16 09:11 - 00001682 _____ C:\ProgramData\Desktop\REX 4 - Texture Direct .lnk
2016-03-16 09:08 - 2016-03-16 09:08 - 00001658 _____ C:\Users\Public\Desktop\REX Soft Clouds.lnk
2016-03-16 09:08 - 2016-03-16 09:08 - 00001658 _____ C:\ProgramData\Desktop\REX Soft Clouds.lnk
2016-03-16 09:08 - 2016-03-16 09:08 - 00000000 ____D C:\ProgramData\Caphyon
2016-03-15 08:14 - 2016-03-15 08:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\APC
2016-03-15 08:13 - 2016-03-15 08:13 - 13923704 _____ (Schneider Electric) C:\Users\Gareth\PCPE Setup.exe
2016-03-15 08:13 - 2016-03-15 08:13 - 13338112 _____ C:\Users\Gareth\PCPE_3.0.1.msi
2016-03-15 08:13 - 2016-03-15 08:13 - 01079808 _____ (Microsoft Corporation) C:\Users\Gareth\mfc80u.dll
2016-03-15 08:13 - 2016-03-15 08:13 - 00626688 _____ (Microsoft Corporation) C:\Users\Gareth\msvcr80.dll
2016-03-15 08:13 - 2016-03-15 08:13 - 00021880 _____ (Schneider Electric) C:\Users\Gareth\grm_res.dll
2016-03-15 08:13 - 2016-03-15 08:13 - 00021880 _____ (Schneider Electric) C:\Users\Gareth\fr_res.dll
2016-03-15 08:13 - 2016-03-15 08:13 - 00021368 _____ (Schneider Electric) C:\Users\Gareth\pt_res.dll
2016-03-15 08:13 - 2016-03-15 08:13 - 00021368 _____ (Schneider Electric) C:\Users\Gareth\it_res.dll
2016-03-15 08:13 - 2016-03-15 08:13 - 00021368 _____ (Schneider Electric) C:\Users\Gareth\es_res.dll
2016-03-15 08:13 - 2016-03-15 08:13 - 00021368 _____ (Schneider Electric) C:\Users\Gareth\en_res.dll
2016-03-15 08:13 - 2016-03-15 08:13 - 00020856 _____ (Schneider Electric) C:\Users\Gareth\ru_res.dll
2016-03-15 08:13 - 2016-03-15 08:13 - 00020344 _____ (Schneider Electric) C:\Users\Gareth\jp_res.dll
2016-03-15 08:13 - 2016-03-15 08:13 - 00019832 _____ (Schneider Electric) C:\Users\Gareth\zh_res.dll
2016-03-15 08:13 - 2016-03-15 08:13 - 00018808 _____ C:\Users\Gareth\ResourceReader.dll
2016-03-15 08:13 - 2016-03-15 08:13 - 00000550 _____ C:\Users\Gareth\Microsoft.VC80.MFC.manifest
2016-03-15 08:13 - 2016-03-15 08:13 - 00000522 _____ C:\Users\Gareth\Microsoft.VC80.CRT.manifest
2016-03-15 08:13 - 2016-03-15 08:13 - 00000035 _____ C:\Users\Gareth\dotnetfolder.txt
2016-03-14 16:58 - 2016-03-14 16:58 - 00000244 _____ C:\Users\Gareth\Desktop\Opus Camera Guide.URL
2016-03-14 16:36 - 2016-03-14 16:36 - 00000000 ____D C:\Users\Gareth\Documents\Prepar3D v2 Files
2016-03-14 16:24 - 2016-03-21 18:21 - 00000000 ____D C:\Users\Public\Documents\Fury_1500
2016-03-14 16:24 - 2016-03-21 18:21 - 00000000 ____D C:\ProgramData\Documents\Fury_1500
2016-03-14 16:24 - 2016-03-14 15:53 - 03084296 _____ C:\Users\Gareth\Downloads\Install_Content.msi
2016-03-14 15:54 - 2016-03-14 16:22 - 1739085956 _____ C:\Users\Gareth\Downloads\cont1.cab
2016-03-14 15:20 - 2016-03-25 11:36 - 00000000 ____D C:\PRO-ATC-X
2016-03-14 15:20 - 2016-03-14 15:20 - 00000612 _____ C:\Users\Gareth\Desktop\PRO-ATC-X.lnk
2016-03-14 15:20 - 2016-03-14 15:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PRO-ATC-X
2016-03-11 13:49 - 2016-01-28 11:20 - 00209056 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2016-03-11 08:34 - 2016-03-11 08:35 - 00000000 ___RD C:\Users\Gareth\Desktop\REX4
2016-03-10 23:57 - 2016-03-10 23:57 - 05575160 _____ (Mad catz ) C:\Users\Gareth\Downloads\Saitek_X52_Flight_Controller_7_0_53_6_x64_Drivers.exe
2016-03-10 23:57 - 2016-03-10 23:57 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SaiK075C_01009.Wdf
2016-03-10 12:54 - 2016-03-14 18:09 - 00001203 _____ C:\Users\Public\Desktop\FS2Crew Deal.lnk
2016-03-10 12:54 - 2016-03-14 18:09 - 00001203 _____ C:\ProgramData\Desktop\FS2Crew Deal.lnk
2016-03-10 12:54 - 2016-03-10 12:54 - 00001361 _____ C:\Users\Public\Desktop\NGX Reboot Config.lnk
2016-03-10 12:54 - 2016-03-10 12:54 - 00001361 _____ C:\ProgramData\Desktop\NGX Reboot Config.lnk
2016-03-10 12:54 - 2016-03-10 12:54 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\FS2Crew2010
2016-03-10 12:54 - 2016-03-10 12:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FS2Crew2015
2016-03-10 12:17 - 2016-03-10 12:17 - 00000000 ____D C:\ProgramData\MyTraffic
2016-03-10 11:31 - 2016-03-10 11:33 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyTraffic Professional 6.0a
2016-03-09 23:16 - 2016-03-09 23:16 - 00001227 _____ C:\Users\Public\Desktop\Navigraph FMS Data.lnk
2016-03-09 23:16 - 2016-03-09 23:16 - 00001227 _____ C:\ProgramData\Desktop\Navigraph FMS Data.lnk
2016-03-09 17:53 - 2016-03-16 09:10 - 00000000 ____D C:\REX Soft Clouds
2016-03-09 17:42 - 2016-03-16 09:11 - 00000000 ____D C:\REX Texture Direct
2016-03-09 17:42 - 2016-03-09 17:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REX 4
2016-03-09 14:39 - 2016-02-09 08:53 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-03-09 14:39 - 2016-02-09 08:10 - 00341200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-03-09 14:39 - 2016-02-08 23:05 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-03-09 14:39 - 2016-02-08 22:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-03-09 14:39 - 2016-02-08 22:39 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-03-09 14:39 - 2016-02-08 22:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-03-09 14:39 - 2016-02-08 22:38 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-03-09 14:39 - 2016-02-08 22:38 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-03-09 14:39 - 2016-02-08 22:37 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-03-09 14:39 - 2016-02-08 22:34 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-03-09 14:39 - 2016-02-08 22:32 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-03-09 14:39 - 2016-02-08 22:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-03-09 14:39 - 2016-02-08 22:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-03-09 14:39 - 2016-02-08 22:28 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-03-09 14:39 - 2016-02-08 22:28 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-03-09 14:39 - 2016-02-08 22:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-03-09 14:39 - 2016-02-08 22:20 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-03-09 14:39 - 2016-02-08 22:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-03-09 14:39 - 2016-02-08 22:15 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-03-09 14:39 - 2016-02-08 22:13 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-03-09 14:39 - 2016-02-08 22:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-03-09 14:39 - 2016-02-08 22:11 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-03-09 14:39 - 2016-02-08 22:10 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-03-09 14:39 - 2016-02-08 22:10 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-03-09 14:39 - 2016-02-08 22:05 - 25816576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-09 14:39 - 2016-02-08 22:03 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-03-09 14:39 - 2016-02-08 22:02 - 13012480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-03-09 14:39 - 2016-02-08 22:02 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-03-09 14:39 - 2016-02-08 22:01 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-03-09 14:39 - 2016-02-08 22:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-03-09 14:39 - 2016-02-08 21:43 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-03-09 14:39 - 2016-02-08 21:39 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-03-09 14:39 - 2016-02-08 21:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-03-09 14:39 - 2016-02-08 20:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-03-09 14:39 - 2016-02-08 20:41 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-03-09 14:39 - 2016-02-08 20:27 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-09 14:39 - 2016-02-08 20:27 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-03-09 14:39 - 2016-02-08 20:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-09 14:39 - 2016-02-08 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-03-09 14:39 - 2016-02-08 20:26 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-03-09 14:39 - 2016-02-08 20:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-03-09 14:39 - 2016-02-08 20:19 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-03-09 14:39 - 2016-02-08 20:18 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-03-09 14:39 - 2016-02-08 20:16 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-09 14:39 - 2016-02-08 20:15 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-03-09 14:39 - 2016-02-08 20:14 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-03-09 14:39 - 2016-02-08 20:14 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-03-09 14:39 - 2016-02-08 20:13 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-03-09 14:39 - 2016-02-08 20:13 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-03-09 14:39 - 2016-02-08 20:06 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-03-09 14:39 - 2016-02-08 20:03 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-03-09 14:39 - 2016-02-08 19:55 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-03-09 14:39 - 2016-02-08 19:54 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-03-09 14:39 - 2016-02-08 19:52 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-03-09 14:39 - 2016-02-08 19:51 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-09 14:39 - 2016-02-08 19:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-03-09 14:39 - 2016-02-08 19:47 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-03-09 14:39 - 2016-02-08 19:37 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-03-09 14:39 - 2016-02-08 19:35 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-03-09 14:39 - 2016-02-08 19:34 - 00798720 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-09 14:39 - 2016-02-08 19:33 - 14613504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-09 14:39 - 2016-02-08 19:33 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-09 14:39 - 2016-02-08 19:33 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-03-09 14:39 - 2016-02-08 19:19 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-09 14:39 - 2016-02-08 19:07 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-09 14:39 - 2016-02-08 18:55 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-03-09 14:37 - 2016-02-12 20:52 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-03-09 14:37 - 2016-02-12 20:52 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-03-09 14:37 - 2016-02-12 20:52 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-03-09 14:37 - 2016-02-12 20:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-03-09 14:37 - 2016-02-12 20:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-03-09 14:37 - 2016-02-12 20:22 - 02610688 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-03-09 14:37 - 2016-02-12 20:19 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-03-09 14:37 - 2016-02-12 20:18 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-03-09 14:37 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-03-09 14:37 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-03-09 14:37 - 2016-02-12 20:18 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-03-09 14:37 - 2016-02-12 20:18 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-03-09 14:37 - 2016-02-12 20:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-03-09 14:37 - 2016-02-12 20:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-03-09 14:37 - 2016-02-12 20:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-03-09 14:37 - 2016-02-12 20:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-03-09 14:37 - 2016-02-04 19:52 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-09 14:37 - 2016-02-03 20:58 - 00862208 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-03-09 14:37 - 2016-02-03 20:52 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-03-09 14:37 - 2016-02-03 20:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-03-09 14:37 - 2016-02-03 20:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-03-09 14:37 - 2016-02-03 20:07 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-09 14:37 - 2016-01-11 21:11 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-03-09 14:37 - 2015-11-19 16:07 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-03-09 14:37 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-03-09 14:32 - 2016-02-11 20:56 - 05572032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-03-09 14:32 - 2016-02-11 20:56 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-03-09 14:32 - 2016-02-11 20:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-03-09 14:32 - 2016-02-11 20:52 - 01733592 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-03-09 14:32 - 2016-02-11 20:49 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-03-09 14:32 - 2016-02-11 20:49 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-03-09 14:32 - 2016-02-11 20:49 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-03-09 14:32 - 2016-02-11 20:49 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-03-09 14:32 - 2016-02-11 20:49 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-03-09 14:32 - 2016-02-11 20:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-03-09 14:32 - 2016-02-11 20:49 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-03-09 14:32 - 2016-02-11 20:49 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-03-09 14:32 - 2016-02-11 20:48 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-03-09 14:32 - 2016-02-11 20:48 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-03-09 14:32 - 2016-02-11 20:48 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-03-09 14:32 - 2016-02-11 20:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-03-09 14:32 - 2016-02-11 20:48 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-03-09 14:32 - 2016-02-11 20:47 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-03-09 14:32 - 2016-02-11 20:45 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-03-09 14:32 - 2016-02-11 20:45 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-03-09 14:32 - 2016-02-11 20:45 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-03-09 14:32 - 2016-02-11 20:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-03-09 14:32 - 2016-02-11 20:44 - 03994560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-03-09 14:32 - 2016-02-11 20:44 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-03-09 14:32 - 2016-02-11 20:44 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-03-09 14:32 - 2016-02-11 20:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-03-09 14:32 - 2016-02-11 20:44 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-09 14:32 - 2016-02-11 20:44 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-03-09 14:32 - 2016-02-11 20:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-03-09 14:32 - 2016-02-11 20:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-03-09 14:32 - 2016-02-11 20:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 01314328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:38 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-03-09 14:32 - 2016-02-11 20:38 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-03-09 14:32 - 2016-02-11 20:38 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-03-09 14:32 - 2016-02-11 20:38 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-03-09 14:32 - 2016-02-11 20:38 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-03-09 14:32 - 2016-02-11 20:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-03-09 14:32 - 2016-02-11 20:38 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-03-09 14:32 - 2016-02-11 20:37 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-03-09 14:32 - 2016-02-11 20:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-03-09 14:32 - 2016-02-11 20:37 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-03-09 14:32 - 2016-02-11 20:35 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-03-09 14:32 - 2016-02-11 20:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-03-09 14:32 - 2016-02-11 20:35 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-03-09 14:32 - 2016-02-11 20:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-03-09 14:32 - 2016-02-11 20:33 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-03-09 14:32 - 2016-02-11 20:31 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 19:48 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-03-09 14:32 - 2016-02-11 19:43 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-03-09 14:32 - 2016-02-11 19:41 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-03-09 14:32 - 2016-02-11 19:40 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-03-09 14:32 - 2016-02-11 19:34 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-03-09 14:32 - 2016-02-11 19:34 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-03-09 14:32 - 2016-02-11 19:33 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-03-09 14:32 - 2016-02-11 19:32 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-03-09 14:32 - 2016-02-11 19:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-03-09 14:32 - 2016-02-11 19:32 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-03-09 14:32 - 2016-02-11 19:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-03-09 14:32 - 2016-02-11 19:32 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-03-09 14:32 - 2016-02-11 19:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-03-09 14:32 - 2016-02-11 19:31 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-03-09 14:32 - 2016-02-11 19:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 19:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 19:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 14:32 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-03-09 14:31 - 2016-02-09 11:57 - 14634496 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-03-09 14:31 - 2016-02-09 11:57 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-03-09 14:31 - 2016-02-09 11:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-03-09 14:31 - 2016-02-09 11:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-03-09 14:31 - 2016-02-09 11:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-03-09 14:31 - 2016-02-09 11:54 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-03-09 14:31 - 2016-02-09 11:51 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-03-09 14:31 - 2016-02-09 11:51 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-03-09 14:31 - 2016-02-09 11:13 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-03-09 14:31 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-03-09 14:31 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-03-09 14:31 - 2016-02-05 20:54 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-03-09 14:31 - 2016-02-05 20:54 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-03-09 14:31 - 2016-02-05 20:53 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-09 14:31 - 2016-02-05 20:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-03-09 14:31 - 2016-02-05 20:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-03-09 14:31 - 2016-02-05 20:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-03-09 14:31 - 2016-02-05 20:42 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-03-09 14:31 - 2016-02-05 19:48 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-09 14:31 - 2016-02-05 19:43 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-03-09 14:31 - 2016-02-05 19:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-03-09 14:31 - 2016-02-05 03:19 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-09 14:31 - 2016-02-04 20:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-03-09 14:04 - 2016-03-09 14:05 - 19298208 _____ C:\Users\Gareth\Downloads\SiteDownloadPat.php
2016-03-09 11:55 - 2016-03-09 17:51 - 00000000 ____D C:\rexdownload
2016-03-09 11:45 - 2016-03-09 11:45 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Orbx
2016-03-09 10:23 - 2016-03-09 10:23 - 00000000 ____D C:\Users\Gareth\AppData\Local\Foxit Reader
2016-03-09 10:20 - 2016-03-09 10:20 - 00000000 ____D C:\REX Download Manager
2016-03-09 10:20 - 2016-03-09 10:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REX Game Studios
2016-03-09 10:19 - 2016-03-09 10:19 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\REX Game Studios, LLC
2016-03-09 09:07 - 2016-02-19 21:02 - 00038336 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-03-09 09:07 - 2016-02-19 20:54 - 01168896 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-03-09 09:07 - 2016-02-19 16:07 - 01373184 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-03-09 09:07 - 2016-02-11 16:07 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-03-09 09:07 - 2016-02-05 16:07 - 00696832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-03-09 09:07 - 2016-02-05 16:07 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-03-09 09:07 - 2016-02-05 16:07 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-03-08 14:09 - 2016-03-08 14:09 - 00001654 _____ C:\Users\Public\Desktop\Prepar3D v3.lnk
2016-03-08 14:09 - 2016-03-08 14:09 - 00001654 _____ C:\ProgramData\Desktop\Prepar3D v3.lnk
2016-03-08 14:09 - 2016-03-08 14:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lockheed Martin
2016-03-08 00:06 - 2016-03-08 00:06 - 08701472 _____ C:\Users\Gareth\Desktop\NGX   Tutorial.pdf
2016-03-07 12:03 - 2016-03-07 12:03 - 00000000 ___HD C:\ProgramData\CanonIJEGV
2016-03-07 12:02 - 2016-03-07 12:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5400 series Manual
2016-03-05 16:43 - 2016-03-11 08:39 - 00001230 _____ C:\Users\Gareth\Desktop\Prepar3D v3 Plans.lnk
2016-03-05 16:43 - 2016-03-11 08:37 - 00001318 _____ C:\Users\Gareth\Desktop\NGX Plans.lnk
2016-03-05 00:33 - 2016-03-09 23:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navigraph FMS Data Manager
2016-03-05 00:29 - 2016-03-05 00:33 - 00000000 ____D C:\ProgramData\Navigraph
2016-03-05 00:29 - 2016-03-05 00:33 - 00000000 ____D C:\Program Files (x86)\Navigraph
2016-03-05 00:29 - 2016-03-05 00:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navigraph Charts
2016-03-04 18:21 - 2016-03-04 18:21 - 09757080 _____ C:\Users\Gareth\Desktop\Pro-ATC.pdf
2016-03-04 17:57 - 2016-03-04 17:57 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\PMDG
2016-03-04 10:25 - 2010-02-16 15:22 - 00222528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dblist32.Ocx
2016-03-04 10:25 - 2010-02-16 15:22 - 00126800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSWINSCK.ocx
2016-03-04 10:25 - 2008-09-16 16:46 - 00086016 _____ (10Tec Company) C:\Windows\SysWOW64\10Tec_hTooltip_100.dll
2016-03-04 10:25 - 2007-06-25 15:02 - 00475136 _____ (DMSoft Technologies) C:\Windows\SysWOW64\SkinCrafter2.dll
2016-03-04 10:25 - 2005-06-20 09:15 - 00132880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSINET.Ocx
2016-03-04 10:25 - 2005-04-13 05:00 - 00331784 _____ (VBGold Software) C:\Windows\SysWOW64\AResize.ocx
2016-03-04 10:25 - 2004-11-12 11:14 - 00036864 _____ (DMSoftTechnologies) C:\Windows\SysWOW64\SCLabel.ocx
2016-03-04 10:25 - 2003-11-13 16:44 - 00319488 _____ (Polar [email protected] www.polarsoftware.com) C:\Windows\SysWOW64\PolarZIPLight.dll
2016-03-04 10:25 - 2003-09-05 21:11 - 00139264 _____ (FreeVBCode.com) C:\Windows\SysWOW64\vbsendmail.dll
2016-03-04 10:25 - 2003-06-22 19:57 - 00094208 _____ (vbAccelerator) C:\Windows\SysWOW64\CMDLGD6.dll
2016-03-04 10:25 - 2002-05-30 13:08 - 00880640 _____ (SG InWare) C:\Windows\SysWOW64\SGPView4.ocx
2016-03-04 10:25 - 2001-04-19 14:04 - 00053248 _____ (Meelix Information Technology) C:\Windows\SysWOW64\PRNGMIT.dll
2016-03-04 10:25 - 2000-07-09 20:15 - 00106496 _____ (Marco Bellinaso) C:\Windows\SysWOW64\mbprgbar.ocx
2016-03-03 20:32 - 2016-03-03 20:32 - 01193175 _____ C:\Windows\unins000.exe
2016-03-03 20:32 - 2016-03-03 20:32 - 00037801 _____ C:\Windows\unins000.dat
2016-03-03 20:32 - 2016-03-03 20:32 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Corsair Software
2016-03-03 20:32 - 2016-03-03 20:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Corsair
2016-03-03 20:32 - 2016-03-03 20:32 - 00000000 ____D C:\Program Files (x86)\Corsair
2016-03-03 20:32 - 2012-08-10 18:44 - 00025600 _____ ( ) C:\Windows\system32\Drivers\CORK50.sys
2016-03-03 19:42 - 2016-03-03 19:42 - 00000000 ____D C:\Users\Gareth\AppData\Local\GMap.NET
2016-03-03 19:33 - 2016-03-03 19:33 - 00001603 _____ C:\Users\Gareth\Downloads\Opus_PMDG_737NGX.CDF
2016-03-03 19:32 - 2016-03-03 19:32 - 00000672 _____ C:\Users\Gareth\Downloads\Realair Duke Turbine_peebee.CDF
2016-03-03 17:35 - 2016-03-03 17:35 - 00000000 ____D C:\Users\Public\Documents\Logishrd
2016-03-03 17:35 - 2016-03-03 17:35 - 00000000 ____D C:\ProgramData\Documents\Logishrd
2016-03-03 17:34 - 2016-03-03 17:35 - 00000000 ____D C:\ProgramData\Logishrd
2016-03-03 17:34 - 2016-03-03 17:34 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2016-03-03 17:34 - 2016-03-03 17:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2016-03-03 17:34 - 2016-03-03 17:34 - 00000000 ____D C:\Program Files\Logitech
2016-03-03 17:34 - 2016-03-03 17:34 - 00000000 ____D C:\Program Files\Common Files\Logishrd
2016-03-03 17:32 - 2016-03-03 17:35 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Logitech
2016-03-03 17:32 - 2016-03-03 17:32 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Logishrd
2016-03-03 17:08 - 2016-03-28 14:09 - 00000000 ____D C:\ProgramData\firebird
2016-03-03 17:08 - 2015-08-25 14:35 - 00057344 _____ (Peter L. Dowson) C:\MakeRwys.exe
2016-03-03 16:33 - 2016-03-17 09:27 - 00000000 ___RD C:\Users\Gareth\Desktop\MISC
2016-03-03 08:22 - 2016-03-03 08:22 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free FLV Player
2016-03-03 08:22 - 2016-03-03 08:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free FLV Player
2016-03-03 08:22 - 2016-03-03 08:22 - 00000000 ____D C:\Program Files\Free FLV Player
2016-03-02 16:34 - 2016-03-02 16:50 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\iFunbox_UserCache
2016-03-02 16:34 - 2016-03-02 16:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\i-Funbox DevTeam
2016-03-02 16:34 - 2016-03-02 16:34 - 00000000 ____D C:\Program Files (x86)\i-Funbox DevTeam
2016-03-02 16:11 - 2016-03-03 07:37 - 00000000 ____D C:\Users\Gareth\Documents\SynciOS Data Recovery
2016-03-02 16:10 - 2016-03-02 16:10 - 25888704 _____ (Anvsoft, Inc. ) C:\Users\Gareth\Downloads\syncios-data-recovery.exe
2016-03-02 16:09 - 2016-03-02 16:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Syncios
2016-03-02 16:09 - 2016-03-02 16:09 - 00000000 ____D C:\Program Files (x86)\Syncios
2016-03-02 16:07 - 2016-03-02 16:08 - 66390912 _____ (Anvsoft, Inc. ) C:\Users\Gareth\Downloads\setup_syncios.exe
2016-03-01 20:24 - 2016-03-01 20:24 - 00053881 _____ C:\Users\Gareth\Downloads\Predicación Pública Organizada por la Congregación - Formstack.html
2016-03-01 20:24 - 2016-03-01 20:24 - 00000000 ____D C:\Users\Gareth\Downloads\Predicación Pública Organizada por la Congregación - Formstack_files
2016-03-01 13:57 - 2016-03-01 14:03 - 00000000 ____D C:\Users\Gareth\AppData\Local\UmmyVideoDownloader
2016-03-01 13:57 - 2016-03-01 13:57 - 14664456 _____ ( ) C:\Users\Gareth\Downloads\UmmyVideoDownloader_setup.exe
2016-03-01 13:57 - 2016-03-01 13:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UmmyVideoDownloader
2016-03-01 13:53 - 2016-03-01 13:53 - 02382728 _____ C:\Users\Gareth\Downloads\UmmyVD-Web-Loader.exe
2016-03-01 08:46 - 2016-03-21 08:59 - 00000000 ___RD C:\Users\Gareth\iCloudDrive
2016-03-01 08:46 - 2016-03-01 08:46 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iCloud
2016-03-01 08:46 - 2016-03-01 08:46 - 00000000 ____D C:\Users\Gareth\AppData\Local\Apple Inc
2016-02-29 14:47 - 2016-02-29 14:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2016-02-29 14:41 - 2016-03-16 17:35 - 00002563 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-02-29 14:41 - 2016-03-03 07:45 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Syncios
2016-02-29 14:41 - 2016-03-01 08:59 - 00000000 ____D C:\Users\Gareth\AppData\Local\Apple
2016-02-29 14:41 - 2016-02-29 14:47 - 00000000 ____D C:\Users\Gareth\AppData\Local\Apple Computer
2016-02-29 14:25 - 2016-02-29 14:25 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\ThinkSky
2016-02-29 11:25 - 2016-02-29 16:20 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\WindSolutions
2016-02-29 11:25 - 2016-02-29 11:28 - 00000000 ____D C:\ProgramData\WindSolutions
2016-02-29 11:17 - 2016-03-03 07:51 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Apple Computer
2016-02-29 11:17 - 2016-03-03 07:51 - 00000000 ____D C:\ProgramData\Apple Computer
2016-02-29 11:17 - 2016-03-03 07:50 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-02-29 11:17 - 2016-02-29 14:20 - 00000000 ____D C:\Program Files (x86)\ThinkSky
2016-02-29 11:17 - 2016-02-29 11:17 - 00000000 ____D C:\ProgramData\Apple
2016-02-29 11:06 - 2016-02-29 11:06 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2016-02-29 11:05 - 2016-03-21 08:59 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\SynciOS Data Transfer
2016-02-29 11:05 - 2016-03-17 19:01 - 00000000 ____D C:\Users\Gareth\.android
2016-02-29 11:05 - 2016-02-29 11:05 - 00000000 ____D C:\Users\Gareth\AppData\Local\CrashRpt
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-03-28 22:18 - 2016-02-15 10:00 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\DMCache
2016-03-28 22:18 - 2009-07-14 06:45 - 00020496 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-28 22:18 - 2009-07-14 06:45 - 00020496 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-28 22:17 - 2009-07-14 07:13 - 00781298 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-28 22:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-03-28 22:10 - 2016-02-18 15:47 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-28 22:10 - 2016-02-15 14:56 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-28 22:10 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-28 22:09 - 2016-02-16 14:29 - 00036639 _____ C:\Windows\SysWOW64\PCPELog.txt
2016-03-28 22:03 - 2016-02-15 10:00 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\IDM
2016-03-28 22:01 - 2016-02-18 15:47 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-28 22:01 - 2016-02-16 14:54 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-28 20:37 - 2016-02-15 09:11 - 00000000 ____D C:\Users\Gareth\Documents\Bluetooth Folder
2016-03-28 19:34 - 2016-02-15 09:13 - 00000000 ____D C:\ProgramData\Atheros
2016-03-28 19:17 - 2016-02-16 12:39 - 00000000 ____D C:\Users\Gareth\AppData\Local\CrashDumps
2016-03-28 16:14 - 2016-02-15 09:10 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-03-28 16:12 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\Downloaded Program Files
2016-03-28 16:05 - 2016-02-15 15:44 - 00000000 ___RD C:\Users\Gareth\Desktop\Hold-Delete
2016-03-28 13:17 - 2016-02-15 18:39 - 00000000 ____D C:\Users\Gareth\Documents\Prepar3D v3 Files
2016-03-28 12:56 - 2016-02-15 15:50 - 00000000 ____D C:\OpusFSI
2016-03-26 18:04 - 2016-02-21 19:52 - 00000000 ___RD C:\Users\Gareth\Desktop\NI
2016-03-26 00:09 - 2016-02-16 14:08 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-03-25 17:00 - 2016-02-15 14:41 - 00000412 _____ C:\Windows\Tasks\One-Click Optimizer WO12.job
2016-03-25 13:04 - 2016-02-15 10:00 - 00000000 ____D C:\Users\Gareth\Downloads\Video
2016-03-25 10:54 - 2016-02-15 10:00 - 00000000 ____D C:\Users\Gareth\Downloads\Compressed
2016-03-24 22:06 - 2016-02-15 12:19 - 00765280 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-03-24 16:59 - 2016-02-16 14:54 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-24 16:59 - 2016-02-16 14:54 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-24 16:59 - 2016-02-16 14:54 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-03-24 08:23 - 2016-02-15 14:22 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-03-24 08:23 - 2016-02-15 14:22 - 00000000 ___SD C:\Windows\system32\GWX
2016-03-22 23:36 - 2016-02-15 23:59 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\vlc
2016-03-22 17:47 - 2016-02-16 21:31 - 00000000 ____D C:\Users\Gareth\AppData\Local\ElevatedDiagnostics
2016-03-22 17:12 - 2009-07-14 07:08 - 00032636 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-03-22 15:21 - 2016-02-13 21:04 - 00000000 ____D C:\Users\Gareth
2016-03-21 23:40 - 2016-02-15 10:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-03-21 23:38 - 2016-02-16 14:47 - 00000000 ____D C:\Users\Gareth\AppData\Local\PrivateTunnel
2016-03-21 09:07 - 2016-02-21 08:43 - 00000000 ____D C:\Windows\pss
2016-03-20 20:49 - 2016-02-18 12:24 - 00000000 ____D C:\Flight One Software
2016-03-19 23:37 - 2015-11-16 13:21 - 00264552 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2016-03-19 23:37 - 2015-11-16 13:21 - 00170792 _____ (ESET) C:\Windows\system32\Drivers\epfwwfpr.sys
2016-03-17 19:01 - 2016-02-15 10:00 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2016-03-17 19:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2016-03-16 23:37 - 2016-02-16 15:40 - 00000000 ____D C:\Users\Gareth\Documents\Working files
2016-03-15 20:52 - 2016-02-16 14:53 - 00000000 ____D C:\Users\Gareth\AppData\Local\Adobe
2016-03-15 09:23 - 2016-02-18 12:02 - 00000000 ____D C:\ProgramData\Flight One Software
2016-03-15 08:14 - 2016-02-16 13:43 - 00000000 ____D C:\Program Files (x86)\APC
2016-03-13 23:00 - 2016-02-22 10:59 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Audacity
2016-03-12 23:52 - 2016-02-18 11:54 - 00000000 ____D C:\Users\Gareth\AppData\Roaming\Orbx systems
2016-03-12 18:25 - 2016-02-18 10:06 - 00001920 ____H C:\Windows\EPMBatch.ept
2016-03-11 08:52 - 2016-02-18 15:48 - 00002203 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-10 09:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-03-09 23:15 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-03-09 18:42 - 2016-02-21 00:08 - 00000000 ____D C:\Windows\system32\MRT
2016-03-09 18:40 - 2016-02-21 00:08 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-09 18:39 - 2016-02-16 10:23 - 00000000 ____D C:\Windows\system32\appraiser
2016-03-08 17:28 - 2016-02-18 11:53 - 00000000 ____D C:\Users\Gareth\AppData\Local\Orbx
2016-03-07 12:02 - 2016-02-16 15:08 - 00000000 ____D C:\Program Files (x86)\Canon
2016-03-07 11:53 - 2016-02-16 15:35 - 00000000 ____D C:\Users\Gareth\AppData\Local\Canon Easy-PhotoPrint EX
2016-03-07 11:53 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-03-06 22:45 - 2016-02-15 18:52 - 00000000 ____D C:\Users\Gareth\AppData\Local\Windows Live
2016-03-05 01:09 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-03-04 18:02 - 2016-02-24 13:48 - 00000000 ____D C:\Program Files (x86)\PMDG Operations Center
2016-03-03 06:58 - 2016-02-17 00:59 - 00000000 ____D C:\ProgramData\Acronis
2016-02-29 11:05 - 2016-02-16 15:40 - 00000000 ____D C:\Users\Gareth\Documents\Syncios
2016-02-27 00:31 - 2016-02-22 10:59 - 00000000 ____D C:\Program Files (x86)\Audacity
 
==================== Files in the root of some directories =======
 
2008-02-05 14:28 - 2008-02-05 14:28 - 0000051 _____ () C:\Users\Gareth\AppData\Local\setup.txt
 
Files to move or delete:
====================
C:\Users\Gareth\en_res.dll
C:\Users\Gareth\es_res.dll
C:\Users\Gareth\fr_res.dll
C:\Users\Gareth\grm_res.dll
C:\Users\Gareth\it_res.dll
C:\Users\Gareth\jp_res.dll
C:\Users\Gareth\mfc80u.dll
C:\Users\Gareth\msvcr80.dll
C:\Users\Gareth\PCPE Setup.exe
C:\Users\Gareth\pt_res.dll
C:\Users\Gareth\ResourceReader.dll
C:\Users\Gareth\ru_res.dll
C:\Users\Gareth\zh_res.dll
 
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2016-03-28 17:26
 
==================== End of FRST.txt ============================
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by Gareth (2016-03-28 22:18:55)
Running from C:\Users\Gareth\Downloads\Programs
Windows 7 Home Premium Service Pack 1 (X64) (2016-02-13 19:04:53)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-778663071-3000615460-497893972-500 - Administrator - Disabled)
Gareth (S-1-5-21-778663071-3000615460-497893972-1000 - Administrator - Enabled) => C:\Users\Gareth
Guest (S-1-5-21-778663071-3000615460-497893972-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-778663071-3000615460-497893972-1002 - Limited - Enabled)
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: ESET NOD32 Antivirus 9.0.349.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: ESET NOD32 Antivirus 9.0.375.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
2007 Microsoft Office system (HKLM-x32\...\PROHYBRIDR) (Version: 12.0.6612.1000 - Microsoft Corporation)
7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)
Acronis True Image 2014 (HKLM-x32\...\{6B38A7DF-F641-45D5-BBCA-3E676ABCF5C8}Visible) (Version: 17.0.6673 - Acronis)
Acronis True Image 2014 (x32 Version: 17.0.6673 - Acronis) Hidden
Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.197 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.197 - Adobe Systems Incorporated)
Allway Sync version 15.3.1 (HKLM-x32\...\Allway Sync_is1) (Version:  - Botkind Inc)
Apple Application Support (32-bit) (HKLM-x32\...\{7FA9ECCF-A2DE-4DA1-BFF3-81260DBDA68F}) (Version: 4.1.2 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{691F30EB-9009-475A-B8A9-E1BF39598FD5}) (Version: 4.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Ashampoo Burning Studio 10 v.10.0.15 (HKLM-x32\...\{91B33C97-4FC4-BE7D-63C6-5AF22B65AC5E}_is1) (Version: 10.0.15 - Ashampoo GmbH & Co. KG)
Ashampoo WinOptimizer 12 (HKLM-x32\...\{4209F371-15B6-1CE4-15F7-A7BA46F431E3}_is1) (Version: 12.00.45 - Ashampoo GmbH & Co. KG)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.65 - Atheros Communications)
C337H SKYMASTER HD SERIES FSX/P3D (HKLM-x32\...\C337H SKYMASTER HD SERIES FSX/P3D) (Version: 1.00.00.00 - Carenado)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: 4.5.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - ‪Canon Inc.‬)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version:  - ‪Canon Inc.‬)
Canon MG5400 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5400_series) (Version: 1.00 - Canon Inc.)
Canon MG5400 series On-screen Manual (HKLM-x32\...\Canon MG5400 series On-screen Manual) (Version: 7.5.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.6.1 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.16 - Piriform)
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Core Temp 1.0 RC8 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
Corsair K50 Gaming Keyboard Driver V1.0 (HKLM-x32\...\{5F80696B-8F74-4A67-9830-EC2DBA79AD7A}_is1) (Version: 1.00.00.15 - )
CPUID CPU-Z 1.75 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 3.17.31 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.35.1 - Dropbox, Inc.) Hidden
Duplicate Cleaner Free 3.2.7 (HKLM-x32\...\Duplicate Cleaner Free) (Version: 3.2.7 - DigitalVolcano Software Ltd) <==== ATTENTION
EaseUS Partition Master 10.8 (HKLM-x32\...\EaseUS Partition Master_is1) (Version:  - EaseUS)
EaseUS Todo Backup Free 9.0  (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 9.0 - CHENGDU YIWO Tech Development Co., Ltd)
ESET NOD32 Antivirus (HKLM\...\{39609CFB-57C5-4879-9C76-8BE895969C5B}) (Version: 9.0.349.0 - ESET, spol. s r.o.)
Flight1 Citation Mustang P3D (HKLM-x32\...\f1mustang_FSX) (Version: 1.11 - Flight One Software)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.3.0.118 - Foxit Software Inc.)
Free FLV Player (HKLM-x32\...\Free FLV Player) (Version:  - )
FS2Crew: PMDG 737 NGX Reboot Edition (HKLM-x32\...\FS2Crew: PMDG 737 NGX Reboot Edition) (Version:  - )
FSWidgets - Network Pack (HKLM-x32\...\FSWidgets Network Pack_is1) (Version: Version 2.0 - FSWidgets)
Garmin GTN Trainer Lite (HKLM-x32\...\{FE8823C2-815A-493B-B3A4-DC2C20268AE8}) (Version: 5.13.0 - Garmin)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.87 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
iCloud (HKLM\...\{4B48E22A-2FB0-4EFA-B99E-954B1E50CD69}) (Version: 5.1.0.34 - Apple Inc.)
iFunbox (v3.0.3109.1352) (HKLM-x32\...\iFunbox_is1) (Version: v3.0.3109.1352 - iFunbox DevTeam)
Intel® Driver Update Utility 2.4 (x32 Version: 2.4.0.7 - Intel) Hidden
Intel® Network Connections 16.1.53.0 (HKLM\...\PROSetDX) (Version: 16.1.53.0 - Intel)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{561b5fb5-1d4d-40e8-b3e4-ad52858b217c}) (Version: 2.4.0.7 - Intel)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version:  - Tonec Inc.)
JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.17.62.0 - JMicron Technology Corp.)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Karen's Directory Printer (HKLM-x32\...\Karen's Directory Printer) (Version: 5.3.0.2 - Karen Kenworthy)
Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech)
marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.1.0.6 - Marvell)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Flight Simulator SimConnect Client v10.0.60905.0 (HKLM-x32\...\{D1AC9B0B-2727-4811-91DC-1FC3C4E47A9B}) (Version: 10.0.60905.0 - Microsoft Corporation)
Microsoft Flight Simulator SimConnect Client v10.0.61242.0 (HKLM-x32\...\{85DF6786-66AA-42EE-8616-AE456B07BD99}) (Version: 10.0.61242.0 - Microsoft Corporation)
Microsoft Flight Simulator SimConnect Client v10.0.61259.0 (HKLM-x32\...\{D61CA184-3F6D-4A50-B2CC-7A18447D6A8D}) (Version: 10.0.61259.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 45.0.1 (x86 en-GB) (HKLM-x32\...\Mozilla Firefox 45.0.1 (x86 en-GB)) (Version: 45.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.0.1.5918 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyTraffic Professional 6.0a (HKLM-x32\...\{54837FEE-DD02-49B3-BA89-2C0DE323D804}) (Version: 6.0.1 - MyTraffic)
Navigraph Charts 5 (HKLM-x32\...\{97F1794A-C314-4E2D-9127-0B76E9DED18E}) (Version: 5.0.7.0 - Navigraph)
Navigraph FMS Data Manager 1.2.3.0308 (HKLM-x32\...\{7E4D5716-374A-4DB6-90CF-D2AEB67362CE}_is1) (Version: 1.2.3.0308 - Navigraph)
NVIDIA 3D Vision Controller Driver 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 361.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.91 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.10.2.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.10.2.40 - NVIDIA Corporation)
NVIDIA Graphics Driver 361.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.91 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OpusFSI for FSX, FSX-SE, and Prepar3D Flight Simulators (HKLM-x32\...\{12A4FE85-A32A-4F1F-A37A-E0EF85FA3CC3}) (Version: 4.65.3 - Opus Software Limited)
PMDG 737 8900 NGX Base Package P3D (HKLM-x32\...\{0EA92925-36E7-40CB-A714-118AB046099B}) (Version: 1.10.6461 - PMDG Simulations, LLC.)
PowerChute Personal Edition 3.0.2 (HKLM-x32\...\{8ED262EE-FC73-47A9-BB86-D92223246881}) (Version: 3.0.2 - Schneider Electric)
Prepar3D v3 Academic (HKLM-x32\...\{98d538ce-2e29-4c9e-8d9b-c73a3c4af6a1}) (Version: 3.1.2.15831 - Lockheed Martin)
Prepar3D v3 Academic Client (HKLM-x32\...\{213CD124-D688-436D-9BD8-FFB56DC830BE}) (Version: 3.2.2.16659 - Lockheed Martin)
Prepar3D v3 Content (HKLM-x32\...\{CE8E65FC-9BE3-438A-8449-BCD5E8ACC6BE}) (Version: 3.2.3.16769 - Lockheed Martin)
Prepar3D v3 Scenery (HKLM-x32\...\{3F2CF900-1437-4F93-9ABF-07B8B80E37DA}) (Version: 3.1.2.15831 - Lockheed Martin)
PrivateTunnel (HKLM-x32\...\PrivateTunnel) (Version: 2.5.5.8 - OpenVPN Technologies)
PRO-ATC/X version 1.7.2.0 (HKLM-x32\...\PRO-ATC/X_is1) (Version: 1.7.2.0 - )
RealAir Legacy V2 P3D3 (HKLM-x32\...\Legacy V22.05.19 P3D3) (Version: 2.05.19 - RealAir Simulations)
RealAir Turbine Duke V2 P3D3 (HKLM-x32\...\Turbine Duke V22.10.08 P3D3) (Version: 2.10.08 - RealAir Simulations)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.43.321.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6251 - Realtek Semiconductor Corp.)
RemoteFlight Server (HKU\S-1-5-21-778663071-3000615460-497893972-1000\...\99bc7aed10c867fe) (Version: 1.0.0.44 - Inputwish)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden
Revo Uninstaller Pro 3.1.5 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.5 - VS Revo Group, Ltd.)
REX 4 - Texture Direct - SP6 (HKLM-x32\...\{255E36DE-A4C2-452F-B9CF-E128E0F1813A}) (Version: 4.6.2016.0210 - REX Game Studios, LLC.)
REX 4 - Texture Direct - SP6 Hotfix 1 (HKLM-x32\...\{B2004DB8-745F-45F7-A327-E6FCA8341B1B}) (Version: 4.6.2016.0314 - REX Game Studios, LLC.)
REX Download Manager (HKLM-x32\...\{EB29E39C-7D9B-44B3-A46E-58B7E2B4DDE6}) (Version: 1.5.2016.0203 - REX Game Studios, LLC.)
REX Soft Clouds - SP3 (HKLM-x32\...\{6743C1E7-6E56-4774-8D88-5C5201748CC8}) (Version: 4.3.2016.0210 - REX Game Studios, LLC.)
REX Soft Clouds - SP3 Hotfix 1 (HKLM-x32\...\REX Soft Clouds - SP3 Hotfix 1 4.3.2016.0314) (Version: 4.3.2016.0314 - REX Game Studios, LLC.)
REX Soft Clouds - SP3 Hotfix 1 (x32 Version: 4.3.2016.0314 - REX Game Studios, LLC.) Hidden
ScanSoft OmniPage SE 4 (HKLM-x32\...\{BF6E1DCB-4E59-4843-8174-122192B4C1E9}) (Version: 15.2.0020 - Nuance Communications, Inc.)
SeaTools for Windows 1.4.0.4 (HKLM-x32\...\SeaTools for Windows) (Version: 1.4.0.4 - Seagate Technology)
SHIELD Streaming (Version: 5.1.0270 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.10.2.40 - NVIDIA Corporation) Hidden
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Syncios version 5.0.2 (HKLM-x32\...\{068A5D84-8419-4BDE-9689-FE65F412EFBB}_is1) (Version: 5.0.2 - Anvsoft, Inc.)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.56083 - TeamViewer)
TIDAL (HKLM-x32\...\TIDAL 1.2.0.697) (Version: 1.2.0.697 - TIDAL)
TIDAL (x32 Version: 1.2.0.697 - TIDAL) Hidden
TreeSize Personal V6.2.3 (HKLM-x32\...\TreeSize Personal_is1) (Version: 6.2.3 - JAM Software)
UltraSearch V2.0.3 (64 bit) (HKLM\...\UltraSearch_is1) (Version: 2.0.3 - JAM Software)
UmmyVideoDownloader (HKLM-x32\...\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1) (Version: 1.6.0.1 - )
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
VFXCentral (HKLM-x32\...\VFXCentral) (Version: 1.0.0.61 - OldProp Solutions Inc)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.2 - VideoLAN)
Watchtower Library 2015 - English (HKLM-x32\...\{F0D4F127-987D-4345-AA96-5699CF14AF35}) (Version: 17.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {08316FEF-563B-4DD1-A1C6-6B47E8AE6CEF} - System32\Tasks\{3C53C8FF-E516-4D98-864D-A4E6C73C88E7} => pcalua.exe -a "C:\Program Files (x86)\Creative\USB Sound Blaster HD\Program\Setup.exe" -d "C:\Program Files (x86)\Creative\USB Sound Blaster HD\Program"
Task: {093F7DC9-11A1-448A-B16B-E88646838FF0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-18] (Google Inc.)
Task: {12C79E90-A9CC-42E4-862A-D26E3BEB70FE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-18] (Google Inc.)
Task: {1E69312B-D378-49AE-9FC1-24AA59B1CC86} - System32\Tasks\{79E23259-D4C8-4C6D-BC43-BD0C5076F08D} => C:\Program Files (x86)\Creative\USB Sound Blaster HD\Program\Setup.exe
Task: {28B81185-C0DA-43BF-A503-BF58DEB50C11} - System32\Tasks\{8AA51621-886D-4A65-85C1-B223581941C0} => pcalua.exe -a C:\Users\Gareth\Downloads\Compressed\VFXCentral\VFXCentral_Setup.exe -d C:\Users\Gareth\Downloads\Compressed\VFXCentral
Task: {2C673A39-2460-41B7-AF79-52AB777C30E2} - System32\Tasks\{DDAD9C5B-590A-4CCA-BC13-172752FA2236} => C:\Program Files (x86)\Creative\USB Sound Blaster HD\Console Launcher 3\Entertainment Console\EntC.exe
Task: {2D964311-791A-4D18-8C0C-8EF4C25C5636} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {3E963B9F-6255-4120-B07E-1E6D3EBB72F7} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-22] (Dropbox, Inc.)
Task: {563D4123-C3C6-43AE-9529-6EE297958446} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-22] (Dropbox, Inc.)
Task: {57A0DB24-BAE1-42EE-B1D4-4398159BC79C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-03-11] (Piriform Ltd)
Task: {6D614185-929E-4977-B58E-6713A512A41F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {8EE8476B-C456-46D1-B66E-358DEC778FF8} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {B0896212-6290-4DB4-9C82-A98BFF51DD95} - System32\Tasks\{D45F72E8-BB68-4E28-BDE6-C652F382082A} => C:\Users\Gareth\Downloads\Programs\_Getintopc.com_ATIH2014_trial_en-US.exe [2016-02-16] (Acronis)
Task: {B4DE5EB5-478F-4CF0-9A4B-4443BB9FCE9A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-24] (Adobe Systems Incorporated)
Task: {BD72F90B-82DA-4003-98E2-FB0D40798F4E} - System32\Tasks\One-Click Optimizer WO12 => C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 12\WO12.exe [2016-01-20] (Ashampoo Development GmbH & Co. KG)
Task: {E30C4BDE-1BB8-490B-B7E9-84AD0F6F3C67} - System32\Tasks\{91FD1F86-90F5-4C9A-BB89-90258E2D367D} => C:\Program Files (x86)\Creative\USB Sound Blaster HD\AudioCS\CTAudCS.exe
Task: {FA78C9F5-B1A5-4491-B487-313C8FFA9A90} - System32\Tasks\{54D63A48-ECE3-4048-B964-3549F26127DA} => C:\Program Files (x86)\Creative\USB Sound Blaster HD\AudioCS\CTAudCS.exe
Task: {FC6DE738-09C3-44F4-B287-50428B60851E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {FEAFE1F4-770E-4F20-9DB7-D8AFD8F9C26A} - System32\Tasks\{D36577A2-C398-493F-84BA-6B617ECC74E5} => C:\Program Files (x86)\Creative\USB Sound Blaster HD\Program\Setup.exe
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\One-Click Optimizer WO12.job => C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 12\WO12.exe
 
==================== Shortcuts =============================
 
(The entries could be listed to be restored or removed.)
 
Shortcut: C:\Users\Gareth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Orbx\Cleanup_FTXGFreeware.lnk -> F:\Lockheed Martin\Prepar3D v3\ORBX\Scripts\Cleanup_FTXGFreeware.bat ()
 
==================== Loaded Modules (Whitelisted) ==============
 
2015-01-20 23:35 - 2015-01-20 23:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-12-17 19:38 - 2015-12-17 19:38 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-02-15 14:56 - 2016-02-09 07:41 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-02-15 14:59 - 2015-10-29 13:44 - 00182784 _____ () C:\Program Files (x86)\Allway Sync\Bin\SyncService.exe
2016-02-19 12:06 - 2016-02-17 08:56 - 01416064 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-02-19 12:06 - 2016-02-17 08:56 - 03613056 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-02-15 14:56 - 2016-02-17 08:56 - 00299392 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-01-23 00:48 - 2016-01-23 00:48 - 01491320 _____ () C:\Program Files (x86)\OpenVPN Technologies\PrivateTunnel\ovpnagent.exe
2016-02-16 13:59 - 2015-12-10 07:14 - 00249384 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
2013-10-01 11:26 - 2013-10-01 11:26 - 02810968 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll
2016-02-15 09:35 - 2015-06-01 22:00 - 00102912 _____ () C:\Windows\System32\IccLibDll_x64.dll
2016-02-16 14:00 - 2015-12-10 07:16 - 00253992 _____ () C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe
2016-02-18 17:50 - 2016-01-20 11:25 - 00231248 _____ () C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 12\LiveTunerService.exe
2016-02-16 13:59 - 2015-12-10 07:04 - 00080936 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CodeLog.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 01296424 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\libxml2.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00060968 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\zlib1.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00017448 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CompressFile.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00088616 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBGetRemoteNetInfo.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00022568 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CmcTbProxy.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00186408 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCPipeCenter.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00165928 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCAdapt.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00058408 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBInfo.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00015912 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCNetTokenProxy.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00108072 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActivationOnline.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00077864 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\logsys.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00030760 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DiskSearchImg.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00068136 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\MountImg.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00158248 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ImgFile.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00281128 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DsImgFile.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00072232 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CheckImg.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00139816 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\vhdvmdk.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00037416 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\BootDriver.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00769064 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExImage.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00193064 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBackupSize.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00443944 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AndroidImage.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00148008 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumDisk.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00076840 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\FatLib.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00207912 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NTFSLib.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00111656 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\FileStorage.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00169512 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CloudInterface.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00501800 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\StorageMgr.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00024616 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\GetDriverInfo.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00020520 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CorrectMbr.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00032296 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumTapeDevice.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00034856 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbTapeBrowse.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00064040 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\RegLib.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00025128 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AccountManager.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00059944 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NasOperator.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00201768 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBrowser.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00077864 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CloudOperator.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00018984 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActiveOnline.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00136232 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\VMConfig.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00020008 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AndroidDeviceManager.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00043048 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbDataSwap.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00353832 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DeviceManager.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00027176 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DeviceAdapter.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00138792 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\Device.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00146984 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\Partition.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00050216 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\FileSystemAnalyser.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00061992 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\FATFileSystemAnalyser.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00089640 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\Common.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00056360 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NTFSFileSystemAnalyser.dll
2016-02-16 14:08 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2016-02-16 14:08 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2016-02-16 14:08 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2016-02-16 14:08 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2016-02-16 13:59 - 2015-12-10 07:04 - 00224808 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\SmartBackup.dll
2016-02-15 14:56 - 2016-02-17 09:02 - 00020352 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-12-17 19:39 - 2015-12-17 19:39 - 01040144 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-01-20 23:35 - 2015-01-20 23:35 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2015-12-17 19:38 - 2015-12-17 19:38 - 00237328 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2016-02-16 14:00 - 2015-12-10 07:16 - 00223272 _____ () C:\Program Files (x86)\EaseUS\TrayPopup\traynet.dll
2016-02-16 14:00 - 2015-12-10 07:16 - 00275496 _____ () C:\Program Files (x86)\EaseUS\TrayPopup\libcurl.dll
2016-02-16 14:00 - 2015-12-10 07:16 - 00118328 _____ () C:\Program Files (x86)\EaseUS\TrayPopup\zlib1.dll
2016-02-16 14:00 - 2015-12-10 07:16 - 00249896 _____ () C:\Program Files (x86)\EaseUS\TrayPopup\uexper.dll
2014-02-04 19:25 - 2014-02-04 19:25 - 00036672 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\qt_icontray_ex.dll
2014-02-04 19:25 - 2014-02-04 19:25 - 00028992 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\thread_pool.dll
2016-03-03 20:32 - 2012-05-14 13:39 - 00043008 _____ () C:\Program Files (x86)\Corsair\K50 Keyboard\hidGetKey.dll
2016-03-22 00:30 - 2016-03-21 23:50 - 00034768 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2016-03-23 09:23 - 2016-03-21 23:51 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2016-03-23 09:23 - 2016-03-21 23:50 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2016-03-22 00:30 - 2016-03-21 23:50 - 00093640 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2016-03-22 00:30 - 2016-03-21 23:50 - 00018376 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2016-03-22 00:30 - 2016-03-23 01:33 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2016-03-22 00:30 - 2016-03-21 23:52 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2016-03-23 09:23 - 2016-03-21 23:50 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2016-03-22 00:30 - 2016-03-23 01:33 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2016-03-22 00:30 - 2016-03-21 23:50 - 00692688 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2016-03-22 00:30 - 2016-03-21 23:51 - 00112592 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 01682760 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2016-03-22 00:30 - 2016-03-23 01:34 - 00021840 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2016-03-23 09:23 - 2016-03-21 23:52 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2016-03-22 00:30 - 2016-03-21 23:52 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2016-03-22 00:30 - 2016-03-21 23:52 - 00114640 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2016-03-22 00:30 - 2016-03-21 23:52 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2016-03-22 00:30 - 2016-03-23 01:34 - 00021832 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_pywin_kernel32_x64d8f881xc8c369be.pyd
2016-03-22 00:30 - 2016-03-21 23:52 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2016-03-22 00:30 - 2016-03-21 23:52 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2016-03-22 00:30 - 2016-03-21 23:52 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2016-03-22 00:30 - 2016-03-21 23:52 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2016-03-22 00:30 - 2016-03-21 23:52 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2016-03-22 00:30 - 2016-03-21 23:52 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-03-22 00:30 - 2016-03-21 23:52 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2016-03-22 00:30 - 2016-03-21 23:52 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00117056 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2016-03-22 00:30 - 2016-03-23 01:34 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2016-03-22 00:30 - 2016-03-21 23:50 - 00134608 _____ () C:\Program Files (x86)\Dropbox\Client\_elementtree.pyd
2016-03-23 09:23 - 2016-03-21 23:50 - 00134088 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2016-03-23 09:23 - 2016-03-21 23:51 - 00240584 _____ () C:\Program Files (x86)\Dropbox\Client\jpegtran.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2016-03-23 09:23 - 2016-03-21 23:52 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2016-03-23 09:23 - 2016-03-23 01:33 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2016-03-22 00:30 - 2016-03-23 01:34 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-03-22 00:30 - 2016-03-23 01:34 - 00021824 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32._winffi_kernel32.pyd
2016-03-22 00:30 - 2016-03-23 01:34 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror._winffi_winerror.pyd
2016-03-22 00:30 - 2016-03-23 01:34 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet._winffi_wininet.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2016-03-22 00:30 - 2016-03-21 23:52 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2016-03-22 00:30 - 2016-03-23 01:34 - 00022352 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00084280 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2016-03-23 09:23 - 2016-03-23 01:33 - 01826096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2016-03-22 00:30 - 2016-03-21 23:51 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 03928880 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 01971504 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00531248 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00132912 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00223544 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00158008 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00042808 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2016-03-23 09:23 - 2016-03-21 23:54 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll
2016-03-23 09:23 - 2016-03-21 23:54 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2016-03-22 00:30 - 2016-03-23 01:34 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00546096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2016-03-23 09:23 - 2016-03-23 01:33 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2016-03-22 00:30 - 2016-03-21 23:56 - 00697304 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Controls\qtquickcontrolsplugin.dll
2014-02-04 19:28 - 2014-02-04 19:28 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 
==================== EXE Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-778663071-3000615460-497893972-1000\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^PrivateTunnel.lnk => C:\Windows\pss\PrivateTunnel.lnk.CommonStartup
MSCONFIG\startupreg: EaseUS EPM tray => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe
MSCONFIG\startupreg: EaseUS EPM Tray Agent => "C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\TrayTipAgentE.exe"
MSCONFIG\startupreg: iCloudDrive => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
MSCONFIG\startupreg: iFunBox => C:\Program Files (x86)\i-Funbox DevTeam\iFunBox_x64.exe /tray
MSCONFIG\startupreg: Navigraph FMS Data Manager => C:\Program Files (x86)\Navigraph\FMS Data Manager\NGFMSAgent.exe -autostart
MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SpybotPostWindows10UpgradeReInstall => "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe"
MSCONFIG\startupreg: SSBkgdUpdate => "C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
MSCONFIG\startupreg: Syncios device service => C:\Program Files (x86)\Syncios\SynciosDeviceService.exe
MSCONFIG\startupreg: TIDAL => "C:\Program Files (x86)\TIDAL\TIDAL.exe"
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{1E2A2D37-AFDF-4517-ADCA-39F546F654FF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5B77FE15-0622-4D9A-9D82-372256BEF9FC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BFCB7319-CAC3-4129-9B45-2F3BEF8BFADB}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{F692CE5B-1294-418F-8558-AF45BE60923B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{EBE178DD-1AA0-4B25-AD70-6852CA8D73AB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{69BF6D4B-0D7B-40E4-84AC-EE170FC51EE0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{D4ED6B00-4A0F-4DA7-ABAE-2F568E837061}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{7C16042C-1B42-4216-944F-8DD518838654}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{600F7F53-4C96-4ED0-AD6A-ED742656609A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E27DEF1B-E276-4DB1-92D2-92DD90F39324}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{DA1D8147-5414-44E1-A79F-FC9B6CD3077C}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{AFECF834-97D6-4435-B04D-92A5F7D079A0}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{B7F30F9A-2C41-4C77-9620-781B112552E2}] => (Allow) LPort=2869
FirewallRules: [{AB484500-2FA5-4D8D-A136-D19AC1E31BBB}] => (Allow) LPort=1900
FirewallRules: [{0D57E87A-CE83-41E7-9CAE-6582A90A92FC}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe
FirewallRules: [{1CD3A595-E127-435D-AEF7-CA53BBA7FF36}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe
FirewallRules: [{46FDCCFC-15F3-4C3A-8302-CC8C45B7E7BA}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe
FirewallRules: [{AB341366-F239-4709-B52F-5DDE1BA95AA9}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe
FirewallRules: [{519E3F68-F401-4737-A700-A0EEAE7BD09A}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{94D37A84-B2F4-4D80-B445-44A25292481A}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{34E21C04-A843-4D27-90A6-7252265FC79B}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{081866F3-46A2-4132-80B6-1A72A960E411}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{8E0B1FF7-8F2D-4B95-86B8-B36697FAD2A5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C9B1833A-5CBA-4A18-AAFF-23338CD8755F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{337320FA-ED7F-4CA8-A4E2-30E65E45ED9E}C:\program files (x86)\fswidgets network pack\fswnethost.exe] => (Allow) C:\program files (x86)\fswidgets network pack\fswnethost.exe
FirewallRules: [UDP Query User{F6572895-1D8C-4599-B69E-02042B4E79ED}C:\program files (x86)\fswidgets network pack\fswnethost.exe] => (Allow) C:\program files (x86)\fswidgets network pack\fswnethost.exe
FirewallRules: [TCP Query User{9B6404EE-5F48-4C35-94A6-378B7BB834B8}C:\users\gareth\downloads\compressed\remoteflightserver\remoteflightserver\remoteflightserver.exe] => (Allow) C:\users\gareth\downloads\compressed\remoteflightserver\remoteflightserver\remoteflightserver.exe
FirewallRules: [UDP Query User{5053CDA9-1066-4609-B6D6-72F079D4F88A}C:\users\gareth\downloads\compressed\remoteflightserver\remoteflightserver\remoteflightserver.exe] => (Allow) C:\users\gareth\downloads\compressed\remoteflightserver\remoteflightserver\remoteflightserver.exe
FirewallRules: [TCP Query User{E5D5A573-0402-488C-9268-1F31370D377A}C:\users\gareth\appdata\local\apps\2.0\tq22bzj1.97l\v5ckpbvn.q7b\remo..tion_5f383c4b101aca72_0001.0000_b04a1ed958360fff\remoteflightserver.exe] => (Allow) C:\users\gareth\appdata\local\apps\2.0\tq22bzj1.97l\v5ckpbvn.q7b\remo..tion_5f383c4b101aca72_0001.0000_b04a1ed958360fff\remoteflightserver.exe
FirewallRules: [UDP Query User{997C1EA6-1A66-4520-AEDA-4ED332C85451}C:\users\gareth\appdata\local\apps\2.0\tq22bzj1.97l\v5ckpbvn.q7b\remo..tion_5f383c4b101aca72_0001.0000_b04a1ed958360fff\remoteflightserver.exe] => (Allow) C:\users\gareth\appdata\local\apps\2.0\tq22bzj1.97l\v5ckpbvn.q7b\remo..tion_5f383c4b101aca72_0001.0000_b04a1ed958360fff\remoteflightserver.exe
FirewallRules: [{6CBD7688-D654-44BB-8C99-14D8AB91B9E8}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{BE979F15-D0CB-4788-BCE7-B0FFFCF841AD}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{CC24249D-64F9-47FF-A20C-5805C76173AF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{DF3147DF-80DC-40C6-86A6-6F0865595BAA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{5F9AF26B-A637-4A7B-AD72-F1A000B9D2B2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
 
==================== Restore Points =========================
 
17-03-2016 18:38:07 Removed Creative ASIO (USB)
17-03-2016 18:39:53 Installed USB Sound Blaster HD
17-03-2016 18:42:51 Revo Uninstaller Pro's restore point - USB Sound Blaster HD
17-03-2016 18:43:11 Removed USB Sound Blaster HD
17-03-2016 18:57:12 Windows Update
17-03-2016 19:00:21 Restore Operation
19-03-2016 23:45:33 Windows Update
22-03-2016 14:54:08 Configured USB Sound Blaster HD
22-03-2016 15:10:08 Revo Uninstaller Pro's restore point - Creative Media Toolbox 6 (Shared Components)
22-03-2016 16:17:35 Revo Uninstaller Pro's restore point - Creative ASIO (USB)
22-03-2016 16:17:46 Removed Creative ASIO (USB)
22-03-2016 16:18:47 Revo Uninstaller Pro's restore point - Creative Media Toolbox 6 (Shared Components)
22-03-2016 16:54:24 Installed USB Sound Blaster HD
22-03-2016 17:09:11 Installed WaveStudio 7
22-03-2016 17:09:40 Installed Creative Smart Recorder
22-03-2016 17:10:33 Installed Creative Media Toolbox 6
24-03-2016 04:00:14 Windows Update
28-03-2016 14:39:56 Configured USB Sound Blaster HD
28-03-2016 15:00:57 Configured USB Sound Blaster HD
28-03-2016 15:04:25 Revo Uninstaller Pro's restore point - Creative Media Toolbox 6 (Shared Components)
28-03-2016 15:12:17 Configured USB Sound Blaster HD
28-03-2016 15:16:06 Configured USB Sound Blaster HD
28-03-2016 15:22:35 Revo Uninstaller Pro's restore point - Creative System Information
28-03-2016 15:22:44 Removed Creative System Information
28-03-2016 15:28:26 Revo Uninstaller Pro's restore point - Creative Media Toolbox 6 (Shared Components)
28-03-2016 15:43:09 Installed USB Sound Blaster HD
28-03-2016 15:52:51 Removed Creative ASIO (USB)
28-03-2016 15:53:16 Removed Creative System Information
28-03-2016 16:00:23 Configured USB Sound Blaster HD
28-03-2016 16:14:00 Revo Uninstaller Pro's restore point - Creative System Information
28-03-2016 16:14:09 Removed Creative System Information
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (03/28/2016 10:10:35 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (03/28/2016 08:24:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (03/28/2016 07:17:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: DllHost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc6b7
Faulting module name: ti_managers.dll, version: 17.0.0.6673, time stamp: 0x52f0f945
Exception code: 0xc0000005
Fault offset: 0x0056c316
Faulting process id: 0x2024
Faulting application start time: 0xDllHost.exe0
Faulting application path: DllHost.exe1
Faulting module path: DllHost.exe2
Report Id: DllHost.exe3
 
Error: (03/28/2016 07:11:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: explorer.exe, version: 6.1.7601.19135, time stamp: 0x56a1bbe2
Faulting module name: SHELL32.dll, version: 6.1.7601.19135, time stamp: 0x56a1ca0d
Exception code: 0xc000041d
Fault offset: 0x0000000000050596
Faulting process id: 0x1ad0
Faulting application start time: 0xexplorer.exe0
Faulting application path: explorer.exe1
Faulting module path: explorer.exe2
Report Id: explorer.exe3
 
Error: (03/28/2016 07:10:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: explorer.exe, version: 6.1.7601.19135, time stamp: 0x56a1bbe2
Faulting module name: SHELL32.dll, version: 6.1.7601.19135, time stamp: 0x56a1ca0d
Exception code: 0xc000041d
Fault offset: 0x0000000000050596
Faulting process id: 0x828
Faulting application start time: 0xexplorer.exe0
Faulting application path: explorer.exe1
Faulting module path: explorer.exe2
Report Id: explorer.exe3
 
Error: (03/28/2016 07:09:06 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005
 
Error: (03/28/2016 05:03:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (03/28/2016 04:14:00 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005, Access is denied.
.
This is often caused by incorrect security settings in either the writer or requestor process.
 
 
Operation:
   Gathering Writer Data
 
Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {b09f70e4-7da6-413b-8c2f-1f92eabd9178}
 
Error: (03/28/2016 04:02:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (03/28/2016 03:45:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 
System errors:
=============
Error: (03/28/2016 10:01:53 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk4\DR4.
 
Error: (03/28/2016 10:01:53 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk4\DR4.
 
Error: (03/28/2016 10:01:52 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk4\DR4.
 
Error: (03/28/2016 08:37:26 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C}
 
Error: (03/28/2016 06:44:50 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk5\DR5.
 
Error: (03/28/2016 06:44:49 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk5\DR5.
 
Error: (03/28/2016 06:44:48 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk5\DR5.
 
Error: (03/26/2016 11:37:21 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk4\DR4.
 
Error: (03/26/2016 09:20:32 AM) (Source: VDS Basic Provider) (EventID: 1) (User: )
Description: Unexpected failure. Error code: [email protected]
 
Error: (03/25/2016 10:57:04 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk4\DR4.
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i7-2700K CPU @ 3.50GHz
Percentage of memory in use: 30%
Total physical RAM: 8089.14 MB
Available physical RAM: 5661.66 MB
Total Virtual: 16176.48 MB
Available Virtual: 13368.42 MB
 
==================== Drives ================================
 
Drive c: (System) (Fixed) (Total:300.95 GB) (Free:152.93 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (Repair disc Windows Setup 64-bit) (CDROM) (Total:0.16 GB) (Free:0 GB) UDF
Drive e: (Spare) (Fixed) (Total:119.24 GB) (Free:110.43 GB) NTFS
Drive f: (P3D) (Fixed) (Total:238.46 GB) (Free:87.52 GB) NTFS
Drive g: (Samsung USB) (Removable) (Total:29.86 GB) (Free:29.16 GB) FAT32
Drive j: (Seagate Expansion Drive) (Fixed) (Total:1863.02 GB) (Free:1049.47 GB) NTFS
Drive l: (SANDISK) (Removable) (Total:28.95 GB) (Free:28.75 GB) FAT32
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: D2A4F91E)
Partition 1: (Active) - (Size=300.9 GB) - (Type=07 NTFS)
 
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 8517ACC9)
Partition 1: (Not Active) - (Size=238.5 GB) - (Type=OF Extended)
 
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: B1D917C3)
Partition 2: (Active) - (Size=119.2 GB) - (Type=05)
 
========================================================
Disk: 3 (Size: 1863 GB) (Disk ID: 909CEF0A)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
 
========================================================
Disk: 4 (MBR Code: Windows 7 or 8) (Size: 29 GB) (Disk ID: 0FD48FA8)
Partition 1: (Active) - (Size=29 GB) - (Type=0C)
 
========================================================
Disk: 5 (MBR Code: Windows XP) (Size: 29.9 GB) (Disk ID: C3072E18)
Partition 1: (Not Active) - (Size=29.9 GB) - (Type=0C)
 
==================== End of Addition.txt ============================

Attached Files


Edited by RKinner, 31 March 2016 - 07:46 AM.

  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP